$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa File: f65324dc-ed6b-3265-a96a-9e1e83e91357.roa (raw, json) Hash identifier: 0JOGTLNQIrABbR6ciWLWne6VsQPURapwz75Z/GhT4WU= Subject key identifier: DE:FC:34:D7:8D:21:4F:BC:A4:6D:A7:51:41:45:FC:07:4B:BD:3A:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCE3B3DB13BBF57B42F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:3b:3d:b1:3b:bf:57:b4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d5a7a4b9-2613-43c8-bdb4-54fc61a49011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8c:97:0b:7d:55:56:14:2f:af:31:7f:0b:bb: 7f:ea:b8:2c:33:3d:8b:97:cc:8f:22:e7:03:4f:d0: 59:12:ce:1c:bb:88:a1:09:57:9a:cc:6d:bf:b0:0b: 69:a3:a2:c9:cb:08:0f:9d:3f:09:64:7d:6e:92:71: 22:17:b7:be:4d:92:34:7d:0b:1c:8e:c3:91:e5:1e: b5:48:e2:ac:51:8f:60:b5:90:0d:5e:10:12:07:90: 37:aa:10:a0:fe:58:d5:23:cd:b9:04:a3:e0:e7:9b: 50:c0:18:75:5e:56:b5:bb:43:fd:7a:ab:2c:80:38: 35:17:57:87:84:dc:59:ef:44:15:f2:77:34:89:ff: ce:f8:7b:c4:f4:17:11:d1:a6:27:7d:e2:89:7d:c6: 71:7e:da:b0:52:cf:39:04:aa:8f:bd:d4:d8:4f:66: 35:96:21:8a:a6:50:8f:51:da:d8:f4:ce:c1:9e:59: 4e:16:bc:33:78:4d:f3:92:54:09:e7:92:bf:69:77: f4:93:30:a1:73:0c:6b:69:21:9b:c2:c9:0d:e0:23: 11:88:fb:20:9c:a2:a0:93:c7:1a:be:7d:91:f1:63: 9e:1c:63:08:e2:5f:ae:4b:56:2d:73:57:0b:fb:ec: 32:5f:df:a5:81:99:de:28:13:ed:16:3c:76:4e:d5: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:34:D7:8D:21:4F:BC:A4:6D:A7:51:41:45:FC:07:4B:BD:3A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:6e:d1:3e:f6:3b:ee:0f:5c:9c:0f:21:5a:64:e4:5d:0f: 74:51:5a:0c:28:ea:3b:ee:a9:9f:bd:d6:88:fe:c6:64:11:96: 0a:53:e0:b6:16:55:51:57:84:77:8e:d5:52:0d:19:38:53:c2: fa:1f:ca:62:a2:61:d1:14:4e:27:bb:24:62:7b:95:70:09:07: 32:95:45:1e:09:3d:d9:41:95:90:85:e7:a5:b2:ba:7c:ec:e2: 34:06:ed:f0:80:94:26:dc:5d:b4:7b:5c:bc:9f:1a:14:34:0a: ac:5b:0b:36:f8:86:51:4d:f7:5d:28:1a:7a:b6:51:23:36:40: 7e:45:9c:73:ca:65:18:62:b7:5b:b4:d1:53:4a:d2:65:24:7d: d4:28:bc:57:3a:36:7f:f2:86:cf:2e:98:bc:7e:86:2d:78:5f: c1:63:ef:ac:f3:f3:ed:bd:48:14:f8:de:5e:54:67:7a:b4:fc: f6:f8:52:69:70:18:75:e9:e6:7f:ad:f0:17:e7:42:b0:13:0d: e3:43:98:21:f7:a6:f2:4b:04:72:d1:58:c5:9c:20:df:ee:e1: 0b:e5:21:55:ba:2b:23:d1:0f:3c:69:46:3e:55:cc:29:35:a5: 57:56:81:2e:53:03:4a:8a:96:83:51:31:b5:a3:71:55:a6:96: 54:fa:86:4b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM47PbE7v1e0L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDVhN2E0YjktMjYxMy00M2M4LWJkYjQtNTRmYzYxYTQ5MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IyXC31VVhQvrzF/C7t/6rgsMz2Ll8yPIucD T9BZEs4cu4ihCVeazG2/sAtpo6LJywgPnT8JZH1uknEiF7e+TZI0fQscjsOR5R61 SOKsUY9gtZANXhASB5A3qhCg/ljVI825BKPg55tQwBh1Xla1u0P9eqssgDg1F1eH hNxZ70QV8nc0if/O+HvE9BcR0aYnfeKJfcZxftqwUs85BKqPvdTYT2Y1liGKplCP UdrY9M7BnllOFrwzeE3zklQJ55K/aXf0kzChcwxraSGbwskN4CMRiPsgnKKgk8ca vn2R8WOeHGMI4l+uS1Ytc1cL++wyX9+lgZneKBPtFjx2TtVjiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN78NNeNIU+8pG2nUUFF/AdLvTr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY1MzI0ZGMtZWQ2Yi0z MjY1LWE5NmEtOWUxZTgzZTkxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALRhu0T72O+4PXJwPIVpk5F0PdFFaDCjqO+6pn73WiP7GZBGWClPg thZVUVeEd47VUg0ZOFPC+h/KYqJh0RROJ7skYnuVcAkHMpVFHgk92UGVkIXnpbK6 fOziNAbt8ICUJtxdtHtcvJ8aFDQKrFsLNviGUU33XSgaerZRIzZAfkWcc8plGGK3 W7TRU0rSZSR91Ci8Vzo2f/KGzy6YvH6GLXhfwWPvrPPz7b1IFPjeXlRnerT89vhS aXAYdenmf63wF+dCsBMN40OYIfem8ksEctFYxZwg3+7hC+UhVborI9EPPGlGPlXM KTWlV1aBLlMDSoqWg1ExtaNxVaaWVPqGSw== -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:35 2025 by rpki-client